SecAlerts
s

salon booking system

Security Risk Profile

44
/100
medium

Security Risk Score

Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 29, 2024 to present

17
Total CVEs
8
Critical+High
0
Exploited
4
Unpatched

Threat Assessment

Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
44/100
medium
📈 10 in Last 30 Days

Severity Distribution

Critical
2
High
6
Medium
8
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
1

Age Distribution

Common Weaknesses (CWE)

1
XSS
4
2
Malicious File Upload
2
3
Input Validation
1
4
CSRF
1
5
Infoleak
1

Most Affected Products

1. Salon Booking System Salon Booking System11
2. Salonbookingsystem Salon Booking System Wordpress5
3. Salon Booking System Salon Booking System WordPress plugin4
4. WordPress Salon Booking System plugin3
5. Salon Booking System Salon Booking System – Appointment Booking for Salons, Barbershops & Spas1

Recent Vulnerabilities

See more →
CVE-2026-110034
CVSS 3.7low

Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code

Oct 19, 2026🔧 No Patch
CVE-2026-110035
CVSS 4.3medium

Salon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST Route

Oct 18, 2026🔧 No Patch
CVE-2026-110032
CVSS 5.5medium

Salon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer Editor

Oct 18, 2026🔧 No Patch
CVE-2026-110033
CVSS 6.8medium

Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'

Oct 18, 2026🔧 No Patch
CVE-2026-110031
CVSS 7.2high

Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key

Oct 18, 2026🔧 No Patch
CVE-2026-110015
CVSS 8.8high

Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF

Oct 16, 2026🔧 No Patch
CVE-2026-110012
CVSS 4.3medium

Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming

Oct 16, 2026🔧 No Patch
CVE-2026-110014
CVSS 5.3medium

Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status

Oct 16, 2026🔧 No Patch
CVE-2026-110013
CVSS 4.8medium

Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token

Oct 16, 2026🔧 No Patch
CVE-2026-109232
CVSS 7.2high

Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX

Oct 16, 2026🔧 No Patch

Monitor salon booking system in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

salon booking system Security Vulnerabilities & Risk Score | 17 CVEs | SecAlerts - SecAlerts